CVE-2024-40945

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> iommu: Return right value in iommu_sva_bind_device()<br /> <br /> iommu_sva_bind_device() should return either a sva bond handle or an<br /> ERR_PTR value in error cases. Existing drivers (idxd and uacce) only<br /> check the return value with IS_ERR(). This could potentially lead to<br /> a kernel NULL pointer dereference issue if the function returns NULL<br /> instead of an error pointer.<br /> <br /> In reality, this doesn&amp;#39;t cause any problems because iommu_sva_bind_device()<br /> only returns NULL when the kernel is not configured with CONFIG_IOMMU_SVA.<br /> In this case, iommu_dev_enable_feature(dev, IOMMU_DEV_FEAT_SVA) will<br /> return an error, and the device drivers won&amp;#39;t call iommu_sva_bind_device()<br /> at all.